Static task
static1
Behavioral task
behavioral1
Sample
NEAS.05cfe8eeaa78fea11cec97c3505f5060.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.05cfe8eeaa78fea11cec97c3505f5060.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.05cfe8eeaa78fea11cec97c3505f5060.exe
-
Size
190KB
-
MD5
05cfe8eeaa78fea11cec97c3505f5060
-
SHA1
def5b9b17e7b6873c41655a6a4befebaa214e095
-
SHA256
745d34ac2a48f50883987527a06789bd1a8bb500de53d59fdde3a1d236237742
-
SHA512
596bc2b0e12395316c56fd24b7814ea9df66039d285064e0c3f535f166a9a736c7383ff8408b5ca8ba65ce5a2261fc961fd5471f1e0d7fdb498c3bbc79d679f4
-
SSDEEP
3072:XNsgVuqOEYCBtVkD0+XhkOuUcNTeUPgZqpQRQNsgBIuQNs:dxEqOEYeH0rXcNd7xs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.05cfe8eeaa78fea11cec97c3505f5060.exe
Files
-
NEAS.05cfe8eeaa78fea11cec97c3505f5060.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ